Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-21_539e45f32ec42e3aaf67ed756f202264_mafia
-
Size
467KB
-
Sample
240221-rx4k3shf92
-
MD5
539e45f32ec42e3aaf67ed756f202264
-
SHA1
d6fc607b42fd0e958695fad85f4e61ab597f3d72
-
SHA256
f0f5166c18e7ac7f36dde51d9fb0e717b44b6791e4767b95a92e2c43d0826cc9
-
SHA512
7f8f7e79c3f9bcf651f4cc6f89ebbf2997e3bd500f187c6213e2458ad4d82193c94d76b0ffc95b82ec07bf796df9ee9098265d37e9911dabf530546c3b83cfac
-
SSDEEP
12288:Bb4bZudi79LA+Y1fZFGSv6mkZqHoEQOsn0Ak:Bb4bcdkLAX1Bn9pnQOsS
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_539e45f32ec42e3aaf67ed756f202264_mafia.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-21_539e45f32ec42e3aaf67ed756f202264_mafia.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_539e45f32ec42e3aaf67ed756f202264_mafia
-
Size
467KB
-
MD5
539e45f32ec42e3aaf67ed756f202264
-
SHA1
d6fc607b42fd0e958695fad85f4e61ab597f3d72
-
SHA256
f0f5166c18e7ac7f36dde51d9fb0e717b44b6791e4767b95a92e2c43d0826cc9
-
SHA512
7f8f7e79c3f9bcf651f4cc6f89ebbf2997e3bd500f187c6213e2458ad4d82193c94d76b0ffc95b82ec07bf796df9ee9098265d37e9911dabf530546c3b83cfac
-
SSDEEP
12288:Bb4bZudi79LA+Y1fZFGSv6mkZqHoEQOsn0Ak:Bb4bcdkLAX1Bn9pnQOsS
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-